
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21bb6413-13e2-3d07-9bde-2c09449979f6.roa
File: 21bb6413-13e2-3d07-9bde-2c09449979f6.roa (raw, json)
Hash identifier: TW/kbxDc3u+2EL6ekdRIz60301fcZJyna+INR8FezT0=
Subject key identifier: 5E:18:68:08:F0:A9:0C:1B:D7:B5:B1:BA:EB:44:2B:37:4F:A5:8E:CC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584EAFE70832752A7A92B7742F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21bb6413-13e2-3d07-9bde-2c09449979f6.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 34867
IP address blocks: 2001:470:542::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 13 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e7:08:32:75:2a:7a:92:b7:74:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=214fef37-b638-4fce-bb8c-8c3365a677ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:11:46:3f:e3:8a:83:58:47:e5:f8:1e:ad:
8c:61:cc:3b:c7:67:74:82:c5:b3:6b:ef:e2:39:b2:
9f:ce:4b:76:72:82:8f:8f:0c:58:8b:ae:55:a0:ce:
86:ec:4f:92:30:8e:20:d4:6c:85:6f:79:e1:e9:f8:
42:ed:2d:43:e9:d1:80:97:43:55:82:39:6c:74:c9:
2e:4d:40:d8:7a:c3:40:cc:cd:0a:dc:d2:65:44:9e:
3c:e7:ce:c7:1e:f4:dc:46:a8:ad:67:2d:81:df:22:
d3:e0:e8:67:54:1b:34:cf:57:52:3a:bf:5e:09:fa:
70:97:3e:83:8d:be:5f:e2:14:2f:d1:ba:de:6e:5c:
e9:d4:5f:b5:e1:76:37:e7:fa:41:20:38:ff:61:5c:
a2:de:1e:b1:33:41:e7:62:17:66:f0:5e:c4:72:47:
de:36:e0:8b:41:c6:25:e7:86:e3:f9:8a:26:ee:5f:
f9:a6:ae:93:ba:5d:ea:ef:bc:61:d6:6e:c1:b9:f0:
b6:25:41:6e:67:72:87:fa:66:4d:17:a2:e1:a2:15:
97:bd:b1:29:2c:7e:c7:e0:2f:ee:05:84:35:97:77:
89:82:37:d5:7f:78:42:12:87:dc:a5:e2:38:13:35:
3d:38:35:45:0d:b7:2a:d1:b3:f3:66:16:d9:41:65:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:68:08:F0:A9:0C:1B:D7:B5:B1:BA:EB:44:2B:37:4F:A5:8E:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21bb6413-13e2-3d07-9bde-2c09449979f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:542::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:aa:b3:0c:18:0e:81:17:69:73:2f:df:9c:f9:e1:a3:99:aa:
13:9f:be:dc:41:bd:20:5f:ba:30:f4:76:02:6b:6f:25:00:a1:
f8:63:57:06:5e:8b:d0:82:26:01:19:b2:53:f8:fe:3a:29:eb:
b6:03:63:a5:fd:29:d0:c0:8b:99:09:29:3d:e3:03:68:8d:f9:
80:d6:1c:d2:89:b5:a4:e3:c4:39:94:f6:e1:27:9d:40:76:26:
ad:a8:c4:93:f6:41:9a:b0:51:ef:86:22:44:32:b3:50:18:e1:
cc:c9:ed:d8:69:dd:75:0f:e2:07:b9:cd:44:54:b0:56:a7:4c:
ed:b8:7f:16:7c:38:75:1a:76:58:9a:67:7d:f1:f3:58:56:e6:
c3:59:d0:66:96:1f:83:9d:d4:95:cd:48:77:d7:42:58:6b:b5:
ef:cf:1a:17:2c:73:77:7c:9e:72:d6:1e:b0:55:68:10:b3:7e:
9e:79:46:ad:a6:08:c1:89:22:85:a7:66:eb:2b:2d:14:24:9a:
e7:22:ac:5f:b4:84:8d:9a:97:b3:98:55:7c:f3:a5:d3:c8:e0:
9e:af:fb:80:83:0b:6c:8b:6f:74:70:e0:3c:7d:64:0b:0d:94:
83:6c:eb:27:0d:6d:80:1f:dc:1a:af:d1:da:6e:3f:60:35:9e:
0d:f8:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:27:43 2026 by rpki-client